Comment by bigiain

I'm still investigating/experimenting myself, but if I understand properly what I've read so far, you can change that to:

SSLCipherSuite HIGH+DH:MEDIUM+DH:!ADH:!MD5

to require PFS. I'm not sure how many browsers that'll break (I have doubts about broad coverage for Safari/Opera/IE).